2022H3C三层交换机安全配置方法.docx

2022H3C三层交换机安全配置方法H3C三层交换机平安配置方法配置H3C三层交换机通用的四个步骤就是：划分VLAN，并描述;给VLAN划网关;给VLAN指定端口;配置路由协议;学会这几个步骤之后就能解决全部的配置三层交换机的.问题。跟yjbys我一起来学习一下吧!language-modechinese//切换到中文模式system-view//进入系统视图[H3C]displaycurrent-configuration//显示当前配置三层交换机//以下起先配置三层交换机配置三层交换机第一步：划分VLAN，并描述vlan1descriptionlocal-s3600//本交换机运用#vlan2descriptionlink-to-shanxicentre//陕西省中心#vlan3descriptionlink-to-shangjiecentre//商界分中心内部运用#vlan4descriptionlink-to-shangdongsuo//商东所#vlan5descriptionlink-to-shangnansuo//商南所配置三层交换机其次步：给VLAN划网关#interfaceVlan-interface2descriptionlinktoshanxicentreipaddress10.61.242.110255.255.255.252//省中心指定广域网关、子网掩码#interfaceVlan-interface3descriptionlinktoshangjiecentreipaddress10.161.134.65255.255.255.192//商界分中心局域网关、子网掩码#interfaceVlan-interface4descriptionlinktoshangdongsuoipaddress10.61.242.113255.255.255.252//商东所广域网关、子网掩码#interfaceVlan-interface5descriptionlinktoshangnansuoipaddress10.61.242.117255.255.255.252//商南所广域网关、子网掩码配置三层交换机第三步：给VLAN指定端口#interfaceEthernet1/0/2//将交换机的端口2指定给省中心运用descriptionlinktoshanxicentreportaccessvlan2#interfaceEthernet1/0/15-24//将交换机的端口15-24指定给分中心内部运用descriptionlinktoshangjiecentreportaccessvlan3#interfaceEthernet1/0/3//将交换机的端口3指定给商东所运用descriptionlinktoshangdongsuoportaccessvlan4#interfaceEthernet1/0/4//将交换机的端口4指定给商南所运用descriptionlinktoshangnansuoportaccessvlan5配置三层交换机第四步：配置路由协议//配静态路由(只用对远端设备配一条路由即可，本地自通)iproute0.0.0.00.0.0.010.61.242.109//指定全部网段到商东所的路由//配置三层交换机商东所的反向路由iproute10.161.134.0255.255.255.010.61.242.114iproute10.161.135.0255.255.255.010.61.242.114//配置三层交换机商南所的反向路由iproute10.161.135.0255.255.255.010.61.242.118iproute10.161.136.0255.255.255.010.61.242.118//省中心配置三层交换机：iproute10.61.242.0255.255.255.010.61.242.110//商东所242.114和商南所242.118共属的242.0指向分中心网关iproute10.161.134.0255.255.255.010.61.242.110//分中心内部网段指向分中心网关//iproute10.161.134.0255.255.255.010.61.242.110//iproute10.161.135.0255.255.255.010.61.242.110//iproute10.161.136.0255.255.255.010.61.242.110本文来源：网络收集与整理，如有侵权，请联系作者删除，谢